conti attacks United McGill Corporation

Incident Date:

March 4, 2022

World map

Overview

Title

conti attacks United McGill Corporation

Victim

United McGill Corporation

Attacker

Conti

Location

McLean, USA

Virginia, USA

First Reported

March 4, 2022

United McGill Corporation Suffers Ransomware Attack

United McGill Corporation, a family-owned and operated business specializing in engineering, manufacturing, and field installation of construction products and industrial systems, has been targeted by the ransomware group Conti. The attack was announced on the group's dark web leak site, and the victim's website is unitedmcgill.com. United McGill Corporation operates in the manufacturing sector and has about 150 associates with annual sales of approximately $30 million. The company has five wholly-owned subsidiaries, including McGill AirClean, McGill AirFlow, McGill AirPressure, McGill AirSilence, and McGill AirSeal, each with decades of experience in their respective fields.

United McGill Corporation's vulnerabilities in being targeted by threat actors are not explicitly mentioned in the search results. However, the company's size and industry sector suggest that they may have been targeted due to their potential to pay a ransom or the sensitive information they possess. Ransomware attacks on companies have become increasingly common, with the average ransom payment in 2023 being about $1.5 million, a significant increase from the $5,000 paid in 2018. The only solution to prevent these attacks is to completely ban ransom payments, but there is no consensus on this among experts and governments.

The Conti ransomware group has been known for its aggressive extortion tactics, including death threats and the release of sensitive information on dark websites. The group has targeted various sectors, including healthcare, education, and critical infrastructure, causing significant disruptions and financial losses.

United McGill Corporation's website does not provide detailed information about their cybersecurity measures or any recent security incidents. It is essential for the company to publicly address the attack and provide updates on the situation to maintain transparency with their customers and stakeholders.

The ransomware attack on United McGill Corporation highlights the need for companies to strengthen their cybersecurity defenses and be prepared to respond effectively to such incidents. The company should work with cybersecurity experts to assess their vulnerabilities and implement appropriate measures to prevent future attacks.

Sources

  • United McGill Corporation
  • CyberScoop: Victims' reluctance to report ransomware stymies efforts to curb attacks
  • Voice of America: Ransomware Attacks: Death Threats, Endangered Patients and Millions in Damages
  • TechTarget: Publicly disclosed U.S. ransomware attacks database
  • Reuters: Hacker forum post claims UnitedHealth paid $22 million ransom
  • Westfair Online: Study: 60% of ransomware victims lost a client due to an attack

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.